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CREATE VIEW INPT_FACT AS 

SELECT (CASE WHEN MDJD = user-id THEN PTJD ELSE NULL END) PTJD, 
(CASE WHEN MDJD = user-id THEN VST ELSE NULL END) VST, 
(CASE WHEN MDJD = user-id THEN P_NM ELSE NULL END) P_NM, 
AGE, SEX, 

(CASE WHEN MDJD = user-id THEN MDJD ELSE NULL END) MDJD, 
DRG, STAY, COST, PYMT 
FROM INPTJ3ASE; 



FIG. 3 



SELECT MDJD, COUNT(*) VOL, 

AVG(STAY) AVGJ3TAY, AVG(COST) AVG_COST, AVG(PYMT) AVG_PYMT 
FROM INPT_FACT 

GROUP BY MDJD ORDER BY AVG J3TAY DESC; 
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CREATE VIEW I N PT_G R P_B Y_M D 

SELECT (CASE WHEN MDJD = user-id THEN MDJD ELSE NULL END) MDJD, 
COUNT(*) VOL, 

AVG(STAY) AVG_STAY, AVG(COST) AVG_COST, AVG(PYMT) AVG_PYMT 
FROM INPTJ3ASE GROUP BY MDJD ORDER BY AVG_STAY DESC; 
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FIG. 7 



Access 
Level 


Role 


Access Policy 


I 


Executive 


Access to all data. 


II 


Medical Doctor 


Access to doctor's own patient visit data only. 
The patient privacy information of the other patient ! 
visit data should be blinded. The other medical 
doctor's privacy information should be also blinded. 


III 


Financial Analyst 


Access to financial information without any medical 
doctor's information. 
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CREATE OR REPLACE PACKAGE BODY <schema__name>.mSK IS 

FUNCTION P_NM(KEY_PT_ID NUMBER, KEY_VST NUMBER, ORG_P__NM VARCHAR2) 

'RETURN VARCHAR2 v y ' \ 

IS 1002 1( j 04 

BEGIN 

/* Policy logic to decide whether or not we should mask the PJSIM */ 
/* If we should mask the value, then return masked value. Otherwise, */ 
1006 /* return the original value. */ 
"IF <pol±cy_cod±tion> 008 
THEN RETURN ORG_P_NM; 

/* Original Value */ 
ELSE RETURN MASKED_P_NM (ORG_P_NM) ; 

j /* Masked value defined by default mask value function */ 
_END IF; 10 10 
END PJSIM; 
END MASK; 
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SELECT C.PTJD, 
i.VST, 
p.P_NM, 

p. AGE, p.SEX, 
i.MDJD, 
m.D_NM, 
i.DRG, i.STAY, ... 
FROM INPT_FACT i, MD_FACT m, PT_FACT p 
WHERE i.PT_ID=p.PT_ID AND i.MDJD = m.MDJD AND 
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SELECT MASK.PTJD(c.PT_ID, i.VST) PTJD, 

MASK.VST(i.PT_ID, i.VST) VST, ^4-1302 
,MASK.P_NM(i.PT_ID, i.VST, p.P_NM) P_NM, 
MASK.AGE(/.P71/D, /. VST, p.AGE) AGE, -- 
p.SEX, 

MASK.MD_ID(i.MD_ID) MDJD, 
MASK.D_NM(i.MD_ID, m.D_NM) D_NM, 
i.DRG, i.STAY, ... 
FROM INPT_FACT i, MD_FACT m, PT_FACT p 
WHERE i.PTJD=p.PTJD AND i.MDJD = m.MDJD AND ... 
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